xref: /rk3399_ARM-atf/Makefile (revision 7cd731bc14efd1bc664347ab8dc4bf460a8f3efe)
1#
2# Copyright (c) 2013-2020, ARM Limited and Contributors. All rights reserved.
3#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6
7#
8# Trusted Firmware Version
9#
10VERSION_MAJOR			:= 2
11VERSION_MINOR			:= 2
12
13# Default goal is build all images
14.DEFAULT_GOAL			:= all
15
16# Avoid any implicit propagation of command line variable definitions to
17# sub-Makefiles, like CFLAGS that we reserved for the firmware images'
18# usage. Other command line options like "-s" are still propagated as usual.
19MAKEOVERRIDES =
20
21MAKE_HELPERS_DIRECTORY := make_helpers/
22include ${MAKE_HELPERS_DIRECTORY}build_macros.mk
23include ${MAKE_HELPERS_DIRECTORY}build_env.mk
24
25################################################################################
26# Default values for build configurations, and their dependencies
27################################################################################
28
29include ${MAKE_HELPERS_DIRECTORY}defaults.mk
30
31# Assertions enabled for DEBUG builds by default
32ENABLE_ASSERTIONS		:= ${DEBUG}
33ENABLE_PMF			:= ${ENABLE_RUNTIME_INSTRUMENTATION}
34PLAT				:= ${DEFAULT_PLAT}
35
36################################################################################
37# Checkpatch script options
38################################################################################
39
40CHECKCODE_ARGS		:=	--no-patch
41# Do not check the coding style on imported library files or documentation files
42INC_LIB_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
43					include/lib/libfdt		\
44					include/lib/libc,		\
45					$(wildcard include/lib/*)))
46INC_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
47					include/lib,			\
48					$(wildcard include/*)))
49LIB_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
50					lib/compiler-rt			\
51					lib/libfdt%			\
52					lib/libc,			\
53					$(wildcard lib/*)))
54ROOT_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
55					lib				\
56					include				\
57					docs				\
58					%.rst,				\
59					$(wildcard *)))
60CHECK_PATHS		:=	${ROOT_DIRS_TO_CHECK}			\
61				${INC_DIRS_TO_CHECK}			\
62				${INC_LIB_DIRS_TO_CHECK}		\
63				${LIB_DIRS_TO_CHECK}
64
65
66################################################################################
67# Process build options
68################################################################################
69
70# Verbose flag
71ifeq (${V},0)
72        Q:=@
73        ECHO:=@echo
74        CHECKCODE_ARGS	+=	--no-summary --terse
75else
76        Q:=
77        ECHO:=$(ECHO_QUIET)
78endif
79
80ifneq ($(findstring s,$(filter-out --%,$(MAKEFLAGS))),)
81        Q:=@
82        ECHO:=$(ECHO_QUIET)
83endif
84
85export Q ECHO
86
87# Process Debug flag
88$(eval $(call add_define,DEBUG))
89ifneq (${DEBUG}, 0)
90        BUILD_TYPE	:=	debug
91        TF_CFLAGS	+= 	-g
92
93        ifneq ($(findstring clang,$(notdir $(CC))),)
94             ASFLAGS		+= 	-g
95        else
96             ASFLAGS		+= 	-g -Wa,--gdwarf-2
97        endif
98
99        # Use LOG_LEVEL_INFO by default for debug builds
100        LOG_LEVEL	:=	40
101else
102        BUILD_TYPE	:=	release
103        # Use LOG_LEVEL_NOTICE by default for release builds
104        LOG_LEVEL	:=	20
105endif
106
107# Default build string (git branch and commit)
108ifeq (${BUILD_STRING},)
109        BUILD_STRING	:=	$(shell git describe --always --dirty --tags 2> /dev/null)
110endif
111VERSION_STRING		:=	v${VERSION_MAJOR}.${VERSION_MINOR}(${BUILD_TYPE}):${BUILD_STRING}
112
113# The cert_create tool cannot generate certificates individually, so we use the
114# target 'certificates' to create them all
115ifneq (${GENERATE_COT},0)
116        FIP_DEPS += certificates
117        FWU_FIP_DEPS += fwu_certificates
118endif
119
120# Process BRANCH_PROTECTION value and set
121# Pointer Authentication and Branch Target Identification flags
122ifeq (${BRANCH_PROTECTION},0)
123	# Default value turns off all types of branch protection
124	BP_OPTION := none
125else ifneq (${ARCH},aarch64)
126        $(error BRANCH_PROTECTION requires AArch64)
127else ifeq (${BRANCH_PROTECTION},1)
128	# Enables all types of branch protection features
129	BP_OPTION := standard
130	ENABLE_BTI := 1
131	ENABLE_PAUTH := 1
132else ifeq (${BRANCH_PROTECTION},2)
133	# Return address signing to its standard level
134	BP_OPTION := pac-ret
135	ENABLE_PAUTH := 1
136else ifeq (${BRANCH_PROTECTION},3)
137	# Extend the signing to include leaf functions
138	BP_OPTION := pac-ret+leaf
139	ENABLE_PAUTH := 1
140else
141        $(error Unknown BRANCH_PROTECTION value ${BRANCH_PROTECTION})
142endif
143
144# USE_SPINLOCK_CAS requires AArch64 build
145ifeq (${USE_SPINLOCK_CAS},1)
146ifneq (${ARCH},aarch64)
147        $(error USE_SPINLOCK_CAS requires AArch64)
148else
149        $(info USE_SPINLOCK_CAS is an experimental feature)
150endif
151endif
152
153# USE_DEBUGFS experimental feature recommended only in debug builds
154ifeq (${USE_DEBUGFS},1)
155ifeq (${DEBUG},1)
156        $(warning DEBUGFS experimental feature is enabled.)
157else
158        $(warning DEBUGFS experimental, recommended in DEBUG builds ONLY)
159endif
160endif
161
162################################################################################
163# Toolchain
164################################################################################
165
166HOSTCC			:=	gcc
167export HOSTCC
168
169CC			:=	${CROSS_COMPILE}gcc
170CPP			:=	${CROSS_COMPILE}cpp
171AS			:=	${CROSS_COMPILE}gcc
172AR			:=	${CROSS_COMPILE}ar
173LINKER			:=	${CROSS_COMPILE}ld
174OC			:=	${CROSS_COMPILE}objcopy
175OD			:=	${CROSS_COMPILE}objdump
176NM			:=	${CROSS_COMPILE}nm
177PP			:=	${CROSS_COMPILE}gcc -E
178DTC			:=	dtc
179
180# Use ${LD}.bfd instead if it exists (as absolute path or together with $PATH).
181ifneq ($(strip $(wildcard ${LD}.bfd) \
182	$(foreach dir,$(subst :, ,${PATH}),$(wildcard ${dir}/${LINKER}.bfd))),)
183LINKER			:=	${LINKER}.bfd
184endif
185
186ifeq (${ARM_ARCH_MAJOR},7)
187target32-directive	= 	-target arm-none-eabi
188# Will set march32-directive from platform configuration
189else
190target32-directive	= 	-target armv8a-none-eabi
191
192# Set the compiler's target architecture profile based on ARM_ARCH_MINOR option
193ifeq (${ARM_ARCH_MINOR},0)
194march32-directive	= 	-march=armv8-a
195march64-directive	= 	-march=armv8-a
196else
197march32-directive	= 	-march=armv8.${ARM_ARCH_MINOR}-a
198march64-directive	= 	-march=armv8.${ARM_ARCH_MINOR}-a
199endif
200endif
201
202ifneq ($(findstring armclang,$(notdir $(CC))),)
203TF_CFLAGS_aarch32	=	-target arm-arm-none-eabi $(march32-directive)
204TF_CFLAGS_aarch64	=	-target aarch64-arm-none-eabi $(march64-directive)
205LD			=	$(LINKER)
206AS			=	$(CC) -c -x assembler-with-cpp $(TF_CFLAGS_$(ARCH))
207CPP			=	$(CC) -E $(TF_CFLAGS_$(ARCH))
208PP			=	$(CC) -E $(TF_CFLAGS_$(ARCH))
209else ifneq ($(findstring clang,$(notdir $(CC))),)
210TF_CFLAGS_aarch32	=	$(target32-directive) $(march32-directive)
211TF_CFLAGS_aarch64	=	-target aarch64-elf $(march64-directive)
212LD			=	ld.lld
213ifeq (, $(shell which $(LD)))
214$(error "No $(LD) in PATH, make sure it is installed or set LD to a different linker")
215endif
216AS			=	$(CC) -c -x assembler-with-cpp $(TF_CFLAGS_$(ARCH))
217CPP			=	$(CC) -E
218PP			=	$(CC) -E
219else ifneq ($(findstring gcc,$(notdir $(CC))),)
220TF_CFLAGS_aarch32	=	$(march32-directive)
221TF_CFLAGS_aarch64	=	$(march64-directive)
222ifeq ($(ENABLE_LTO),1)
223	# Enable LTO only for aarch64
224	ifeq (${ARCH},aarch64)
225		LTO_CFLAGS	=	-flto
226		# Use gcc as a wrapper for the ld, recommended for LTO
227		LINKER		:=	${CROSS_COMPILE}gcc
228	endif
229endif
230LD			=	$(LINKER)
231else
232TF_CFLAGS_aarch32	=	$(march32-directive)
233TF_CFLAGS_aarch64	=	$(march64-directive)
234LD			=	$(LINKER)
235endif
236
237ifeq (${AARCH32_INSTRUCTION_SET},A32)
238TF_CFLAGS_aarch32	+=	-marm
239else ifeq (${AARCH32_INSTRUCTION_SET},T32)
240TF_CFLAGS_aarch32	+=	-mthumb
241else
242$(error Error: Unknown AArch32 instruction set ${AARCH32_INSTRUCTION_SET})
243endif
244
245TF_CFLAGS_aarch32	+=	-mno-unaligned-access
246TF_CFLAGS_aarch64	+=	-mgeneral-regs-only -mstrict-align
247
248ifneq (${BP_OPTION},none)
249TF_CFLAGS_aarch64	+=	-mbranch-protection=${BP_OPTION}
250endif
251
252ASFLAGS_aarch32		=	$(march32-directive)
253ASFLAGS_aarch64		=	$(march64-directive)
254
255# General warnings
256WARNINGS		:=	-Wall -Wmissing-include-dirs -Wunused	\
257				-Wdisabled-optimization	-Wvla -Wshadow	\
258				-Wno-unused-parameter
259
260# Additional warnings
261# Level 1
262WARNING1 := -Wextra
263WARNING1 += -Wmissing-format-attribute
264WARNING1 += -Wmissing-prototypes
265WARNING1 += -Wold-style-definition
266
267# Level 2
268WARNING2 := -Waggregate-return
269WARNING2 += -Wcast-align
270WARNING2 += -Wnested-externs
271
272WARNING3 := -Wbad-function-cast
273WARNING3 += -Wcast-qual
274WARNING3 += -Wconversion
275WARNING3 += -Wpacked
276WARNING3 += -Wpointer-arith
277WARNING3 += -Wredundant-decls
278WARNING3 += -Wswitch-default
279
280ifeq (${W},1)
281WARNINGS += $(WARNING1)
282else ifeq (${W},2)
283WARNINGS += $(WARNING1) $(WARNING2)
284else ifeq (${W},3)
285WARNINGS += $(WARNING1) $(WARNING2) $(WARNING3)
286endif
287
288# Compiler specific warnings
289ifeq ($(findstring clang,$(notdir $(CC))),)
290# not using clang
291WARNINGS	+=		-Wunused-but-set-variable -Wmaybe-uninitialized	\
292				-Wpacked-bitfield-compat -Wshift-overflow=2 \
293				-Wlogical-op
294else
295# using clang
296WARNINGS	+=		-Wshift-overflow -Wshift-sign-overflow \
297				-Wlogical-op-parentheses
298endif
299
300ifneq (${E},0)
301ERRORS := -Werror
302endif
303
304CPPFLAGS		=	${DEFINES} ${INCLUDES} ${MBEDTLS_INC} -nostdinc	\
305				$(ERRORS) $(WARNINGS)
306ASFLAGS			+=	$(CPPFLAGS) $(ASFLAGS_$(ARCH))			\
307				-ffreestanding -Wa,--fatal-warnings
308TF_CFLAGS		+=	$(CPPFLAGS) $(TF_CFLAGS_$(ARCH))		\
309				-ffunction-sections -fdata-sections		\
310				-ffreestanding -fno-builtin -fno-common		\
311				-Os -std=gnu99
312
313ifeq (${SANITIZE_UB},on)
314TF_CFLAGS		+=	-fsanitize=undefined -fno-sanitize-recover
315endif
316ifeq (${SANITIZE_UB},trap)
317TF_CFLAGS		+=	-fsanitize=undefined -fno-sanitize-recover	\
318				-fsanitize-undefined-trap-on-error
319endif
320
321GCC_V_OUTPUT		:=	$(shell $(CC) -v 2>&1)
322
323# LD = armlink
324ifneq ($(findstring armlink,$(notdir $(LD))),)
325TF_LDFLAGS		+=	--diag_error=warning --lto_level=O1
326TF_LDFLAGS		+=	--remove --info=unused,unusedsymbols
327TF_LDFLAGS		+=	$(TF_LDFLAGS_$(ARCH))
328
329# LD = gcc (used when GCC LTO is enabled)
330else ifneq ($(findstring gcc,$(notdir $(LD))),)
331# Pass ld options with Wl or Xlinker switches
332TF_LDFLAGS		+=	-Wl,--fatal-warnings -O1
333TF_LDFLAGS		+=	-Wl,--gc-sections
334ifeq ($(ENABLE_LTO),1)
335	ifeq (${ARCH},aarch64)
336		TF_LDFLAGS	+=	-flto -fuse-linker-plugin
337	endif
338endif
339# GCC automatically adds fix-cortex-a53-843419 flag when used to link
340# which breaks some builds, so disable if errata fix is not explicitly enabled
341ifneq (${ERRATA_A53_843419},1)
342	TF_LDFLAGS	+= 	-mno-fix-cortex-a53-843419
343endif
344TF_LDFLAGS		+= 	-nostdlib
345TF_LDFLAGS		+=	$(subst --,-Xlinker --,$(TF_LDFLAGS_$(ARCH)))
346
347# LD = gcc-ld (ld) or llvm-ld (ld.lld) or other
348else
349TF_LDFLAGS		+=	--fatal-warnings -O1
350TF_LDFLAGS		+=	--gc-sections
351# ld.lld doesn't recognize the errata flags,
352# therefore don't add those in that case
353ifeq ($(findstring ld.lld,$(notdir $(LD))),)
354TF_LDFLAGS		+=	$(TF_LDFLAGS_$(ARCH))
355endif
356endif
357
358DTC_FLAGS		+=	-I dts -O dtb
359DTC_CPPFLAGS		+=	-P -nostdinc -Iinclude -Ifdts -undef -x assembler-with-cpp
360
361################################################################################
362# Common sources and include directories
363################################################################################
364include lib/compiler-rt/compiler-rt.mk
365
366BL_COMMON_SOURCES	+=	common/bl_common.c			\
367				common/tf_log.c				\
368				common/${ARCH}/debug.S			\
369				drivers/console/multi_console.c		\
370				lib/${ARCH}/cache_helpers.S		\
371				lib/${ARCH}/misc_helpers.S		\
372				plat/common/plat_bl_common.c		\
373				plat/common/plat_log_common.c		\
374				plat/common/${ARCH}/plat_common.c	\
375				plat/common/${ARCH}/platform_helpers.S	\
376				${COMPILER_RT_SRCS}
377
378ifeq ($(notdir $(CC)),armclang)
379BL_COMMON_SOURCES	+=	lib/${ARCH}/armclang_printf.S
380endif
381
382ifeq (${SANITIZE_UB},on)
383BL_COMMON_SOURCES	+=	plat/common/ubsan.c
384endif
385
386INCLUDES		+=	-Iinclude				\
387				-Iinclude/arch/${ARCH}			\
388				-Iinclude/lib/cpus/${ARCH}		\
389				-Iinclude/lib/el3_runtime/${ARCH}	\
390				${PLAT_INCLUDES}			\
391				${SPD_INCLUDES}
392
393include common/backtrace/backtrace.mk
394
395################################################################################
396# Generic definitions
397################################################################################
398
399include ${MAKE_HELPERS_DIRECTORY}plat_helpers.mk
400
401BUILD_BASE		:=	./build
402BUILD_PLAT		:=	${BUILD_BASE}/${PLAT}/${BUILD_TYPE}
403
404SPDS			:=	$(sort $(filter-out none, $(patsubst services/spd/%,%,$(wildcard services/spd/*))))
405
406# Platforms providing their own TBB makefile may override this value
407INCLUDE_TBBR_MK		:=	1
408
409
410################################################################################
411# Include SPD Makefile if one has been specified
412################################################################################
413
414ifneq (${SPD},none)
415ifeq (${ARCH},aarch32)
416        $(error "Error: SPD is incompatible with AArch32.")
417endif
418ifdef EL3_PAYLOAD_BASE
419        $(warning "SPD and EL3_PAYLOAD_BASE are incompatible build options.")
420        $(warning "The SPD and its BL32 companion will be present but ignored.")
421endif
422        # We expect to locate an spd.mk under the specified SPD directory
423        SPD_MAKE	:=	$(wildcard services/spd/${SPD}/${SPD}.mk)
424
425        ifeq (${SPD_MAKE},)
426                $(error Error: No services/spd/${SPD}/${SPD}.mk located)
427        endif
428        $(info Including ${SPD_MAKE})
429        include ${SPD_MAKE}
430
431        # If there's BL32 companion for the chosen SPD, we expect that the SPD's
432        # Makefile would set NEED_BL32 to "yes". In this case, the build system
433        # supports two mutually exclusive options:
434        # * BL32 is built from source: then BL32_SOURCES must contain the list
435        #   of source files to build BL32
436        # * BL32 is a prebuilt binary: then BL32 must point to the image file
437        #   that will be included in the FIP
438        # If both BL32_SOURCES and BL32 are defined, the binary takes precedence
439        # over the sources.
440endif
441
442################################################################################
443# Include the platform specific Makefile after the SPD Makefile (the platform
444# makefile may use all previous definitions in this file)
445################################################################################
446
447include ${PLAT_MAKEFILE_FULL}
448
449$(eval $(call MAKE_PREREQ_DIR,${BUILD_PLAT}))
450
451ifeq (${ARM_ARCH_MAJOR},7)
452include make_helpers/armv7-a-cpus.mk
453endif
454
455PIE_FOUND		:=	$(findstring --enable-default-pie,${GCC_V_OUTPUT})
456ifneq ($(PIE_FOUND),)
457	TF_CFLAGS	+=	-fno-PIE
458endif
459
460ifneq ($(findstring gcc,$(notdir $(LD))),)
461	PIE_LDFLAGS	+=	-Wl,-pie -Wl,--no-dynamic-linker
462else
463	PIE_LDFLAGS	+=	-pie --no-dynamic-linker
464endif
465
466ifeq ($(ENABLE_PIE),1)
467ifeq ($(BL2_AT_EL3),1)
468ifneq ($(BL2_IN_XIP_MEM),1)
469	BL2_CFLAGS	+=	-fpie
470	BL2_LDFLAGS	+=	$(PIE_LDFLAGS)
471endif
472endif
473	BL31_CFLAGS	+=	-fpie
474	BL31_LDFLAGS	+=	$(PIE_LDFLAGS)
475ifeq ($(ARCH),aarch64)
476	BL32_CFLAGS	+=	-fpie
477	BL32_LDFLAGS	+=	$(PIE_LDFLAGS)
478endif
479endif
480
481# Include the CPU specific operations makefile, which provides default
482# values for all CPU errata workarounds and CPU specific optimisations.
483# This can be overridden by the platform.
484include lib/cpus/cpu-ops.mk
485
486ifeq (${ARCH},aarch32)
487NEED_BL32 := yes
488
489################################################################################
490# Build `AARCH32_SP` as BL32 image for AArch32
491################################################################################
492ifneq (${AARCH32_SP},none)
493# We expect to locate an sp.mk under the specified AARCH32_SP directory
494AARCH32_SP_MAKE	:=	$(wildcard bl32/${AARCH32_SP}/${AARCH32_SP}.mk)
495
496ifeq (${AARCH32_SP_MAKE},)
497  $(error Error: No bl32/${AARCH32_SP}/${AARCH32_SP}.mk located)
498endif
499
500$(info Including ${AARCH32_SP_MAKE})
501include ${AARCH32_SP_MAKE}
502endif
503
504endif
505
506################################################################################
507# Include libc if not overridden
508################################################################################
509ifeq (${OVERRIDE_LIBC},0)
510include lib/libc/libc.mk
511endif
512
513################################################################################
514# Check incompatible options
515################################################################################
516
517ifdef EL3_PAYLOAD_BASE
518        ifdef PRELOADED_BL33_BASE
519                $(warning "PRELOADED_BL33_BASE and EL3_PAYLOAD_BASE are \
520                incompatible build options. EL3_PAYLOAD_BASE has priority.")
521        endif
522        ifneq (${GENERATE_COT},0)
523                $(error "GENERATE_COT and EL3_PAYLOAD_BASE are incompatible build options.")
524        endif
525        ifneq (${TRUSTED_BOARD_BOOT},0)
526                $(error "TRUSTED_BOARD_BOOT and EL3_PAYLOAD_BASE are incompatible build options.")
527        endif
528endif
529
530ifeq (${NEED_BL33},yes)
531        ifdef EL3_PAYLOAD_BASE
532                $(warning "BL33 image is not needed when option \
533                BL33_PAYLOAD_BASE is used and won't be added to the FIP file.")
534        endif
535        ifdef PRELOADED_BL33_BASE
536                $(warning "BL33 image is not needed when option \
537                PRELOADED_BL33_BASE is used and won't be added to the FIP \
538                file.")
539        endif
540endif
541
542# When building for systems with hardware-assisted coherency, there's no need to
543# use USE_COHERENT_MEM. Require that USE_COHERENT_MEM must be set to 0 too.
544ifeq ($(HW_ASSISTED_COHERENCY)-$(USE_COHERENT_MEM),1-1)
545$(error USE_COHERENT_MEM cannot be enabled with HW_ASSISTED_COHERENCY)
546endif
547
548#For now, BL2_IN_XIP_MEM is only supported when BL2_AT_EL3 is 1.
549ifeq ($(BL2_AT_EL3)-$(BL2_IN_XIP_MEM),0-1)
550$(error "BL2_IN_XIP_MEM is only supported when BL2_AT_EL3 is enabled")
551endif
552
553# For RAS_EXTENSION, require that EAs are handled in EL3 first
554ifeq ($(RAS_EXTENSION),1)
555    ifneq ($(HANDLE_EA_EL3_FIRST),1)
556        $(error For RAS_EXTENSION, HANDLE_EA_EL3_FIRST must also be 1)
557    endif
558endif
559
560# When FAULT_INJECTION_SUPPORT is used, require that RAS_EXTENSION is enabled
561ifeq ($(FAULT_INJECTION_SUPPORT),1)
562    ifneq ($(RAS_EXTENSION),1)
563        $(error For FAULT_INJECTION_SUPPORT, RAS_EXTENSION must also be 1)
564    endif
565endif
566
567# DYN_DISABLE_AUTH can be set only when TRUSTED_BOARD_BOOT=1
568ifeq ($(DYN_DISABLE_AUTH), 1)
569    ifeq (${TRUSTED_BOARD_BOOT}, 0)
570        $(error "TRUSTED_BOARD_BOOT must be enabled for DYN_DISABLE_AUTH to be set.")
571    endif
572endif
573
574# If pointer authentication is used in the firmware, make sure that all the
575# registers associated to it are also saved and restored.
576# Not doing it would leak the value of the keys used by EL3 to EL1 and S-EL1.
577ifeq ($(ENABLE_PAUTH),1)
578    ifeq ($(CTX_INCLUDE_PAUTH_REGS),0)
579        $(error Pointer Authentication requires CTX_INCLUDE_PAUTH_REGS=1)
580    endif
581endif
582
583ifeq ($(CTX_INCLUDE_PAUTH_REGS),1)
584    ifneq (${ARCH},aarch64)
585        $(error CTX_INCLUDE_PAUTH_REGS requires AArch64)
586    else
587        $(info CTX_INCLUDE_PAUTH_REGS is an experimental feature)
588    endif
589endif
590
591ifeq ($(ENABLE_PAUTH),1)
592    $(info Pointer Authentication is an experimental feature)
593endif
594
595ifeq ($(ENABLE_BTI),1)
596    $(info Branch Protection is an experimental feature)
597endif
598
599ifeq ($(CTX_INCLUDE_MTE_REGS),1)
600    ifneq (${ARCH},aarch64)
601        $(error CTX_INCLUDE_MTE_REGS requires AArch64)
602    else
603        $(info CTX_INCLUDE_MTE_REGS is an experimental feature)
604    endif
605endif
606
607################################################################################
608# Process platform overrideable behaviour
609################################################################################
610
611# Using BL2 implies that a BL33 image also needs to be supplied for the FIP and
612# Certificate generation tools. This flag can be overridden by the platform.
613ifdef BL2_SOURCES
614        ifdef EL3_PAYLOAD_BASE
615                # If booting an EL3 payload there is no need for a BL33 image
616                # in the FIP file.
617                NEED_BL33		:=	no
618        else
619                ifdef PRELOADED_BL33_BASE
620                        # If booting a BL33 preloaded image there is no need of
621                        # another one in the FIP file.
622                        NEED_BL33		:=	no
623                else
624                        NEED_BL33		?=	yes
625                endif
626        endif
627endif
628
629# If SCP_BL2 is given, we always want FIP to include it.
630ifdef SCP_BL2
631        NEED_SCP_BL2		:=	yes
632endif
633
634# For AArch32, BL31 is not currently supported.
635ifneq (${ARCH},aarch32)
636    ifdef BL31_SOURCES
637        # When booting an EL3 payload, there is no need to compile the BL31 image nor
638        # put it in the FIP.
639        ifndef EL3_PAYLOAD_BASE
640            NEED_BL31 := yes
641        endif
642    endif
643endif
644
645# Process TBB related flags
646ifneq (${GENERATE_COT},0)
647        # Common cert_create options
648        ifneq (${CREATE_KEYS},0)
649                $(eval CRT_ARGS += -n)
650                $(eval FWU_CRT_ARGS += -n)
651                ifneq (${SAVE_KEYS},0)
652                        $(eval CRT_ARGS += -k)
653                        $(eval FWU_CRT_ARGS += -k)
654                endif
655        endif
656        # Include TBBR makefile (unless the platform indicates otherwise)
657        ifeq (${INCLUDE_TBBR_MK},1)
658                include make_helpers/tbbr/tbbr_tools.mk
659        endif
660endif
661
662ifneq (${FIP_ALIGN},0)
663FIP_ARGS += --align ${FIP_ALIGN}
664endif
665
666################################################################################
667# Include libraries' Makefile that are used in all BL
668################################################################################
669
670include lib/stack_protector/stack_protector.mk
671
672################################################################################
673# Auxiliary tools (fiptool, cert_create, etc)
674################################################################################
675
676# Variables for use with Certificate Generation Tool
677CRTTOOLPATH		?=	tools/cert_create
678CRTTOOL			?=	${CRTTOOLPATH}/cert_create${BIN_EXT}
679
680# Variables for use with Firmware Image Package
681FIPTOOLPATH		?=	tools/fiptool
682FIPTOOL			?=	${FIPTOOLPATH}/fiptool${BIN_EXT}
683
684# Variables for use with sptool
685SPTOOLPATH		?=	tools/sptool
686SPTOOL			?=	${SPTOOLPATH}/sptool${BIN_EXT}
687
688# Variables for use with ROMLIB
689ROMLIBPATH		?=	lib/romlib
690
691# Variable for use with Python
692PYTHON			?=	python3
693
694# Variables for use with PRINT_MEMORY_MAP
695PRINT_MEMORY_MAP_PATH		?=	tools/memory
696PRINT_MEMORY_MAP		?=	${PRINT_MEMORY_MAP_PATH}/print_memory_map.py
697
698################################################################################
699# Include BL specific makefiles
700################################################################################
701ifdef BL1_SOURCES
702NEED_BL1 := yes
703include bl1/bl1.mk
704endif
705
706ifdef BL2_SOURCES
707NEED_BL2 := yes
708include bl2/bl2.mk
709endif
710
711ifdef BL2U_SOURCES
712NEED_BL2U := yes
713include bl2u/bl2u.mk
714endif
715
716ifeq (${NEED_BL31},yes)
717ifdef BL31_SOURCES
718include bl31/bl31.mk
719endif
720endif
721
722ifdef FDT_SOURCES
723NEED_FDT := yes
724endif
725
726################################################################################
727# Build options checks
728################################################################################
729
730$(eval $(call assert_boolean,COLD_BOOT_SINGLE_CPU))
731$(eval $(call assert_boolean,CREATE_KEYS))
732$(eval $(call assert_boolean,CTX_INCLUDE_AARCH32_REGS))
733$(eval $(call assert_boolean,CTX_INCLUDE_FPREGS))
734$(eval $(call assert_boolean,CTX_INCLUDE_PAUTH_REGS))
735$(eval $(call assert_boolean,CTX_INCLUDE_MTE_REGS))
736$(eval $(call assert_boolean,DEBUG))
737$(eval $(call assert_boolean,DYN_DISABLE_AUTH))
738$(eval $(call assert_boolean,EL3_EXCEPTION_HANDLING))
739$(eval $(call assert_boolean,ENABLE_AMU))
740$(eval $(call assert_boolean,ENABLE_ASSERTIONS))
741$(eval $(call assert_boolean,ENABLE_MPAM_FOR_LOWER_ELS))
742$(eval $(call assert_boolean,ENABLE_PIE))
743$(eval $(call assert_boolean,ENABLE_PMF))
744$(eval $(call assert_boolean,ENABLE_PSCI_STAT))
745$(eval $(call assert_boolean,ENABLE_RUNTIME_INSTRUMENTATION))
746$(eval $(call assert_boolean,ENABLE_SPE_FOR_LOWER_ELS))
747$(eval $(call assert_boolean,ENABLE_SVE_FOR_NS))
748$(eval $(call assert_boolean,ERROR_DEPRECATED))
749$(eval $(call assert_boolean,FAULT_INJECTION_SUPPORT))
750$(eval $(call assert_boolean,GENERATE_COT))
751$(eval $(call assert_boolean,GICV2_G0_FOR_EL3))
752$(eval $(call assert_boolean,HANDLE_EA_EL3_FIRST))
753$(eval $(call assert_boolean,HW_ASSISTED_COHERENCY))
754$(eval $(call assert_boolean,NS_TIMER_SWITCH))
755$(eval $(call assert_boolean,OVERRIDE_LIBC))
756$(eval $(call assert_boolean,PL011_GENERIC_UART))
757$(eval $(call assert_boolean,PROGRAMMABLE_RESET_ADDRESS))
758$(eval $(call assert_boolean,PSCI_EXTENDED_STATE_ID))
759$(eval $(call assert_boolean,RAS_EXTENSION))
760$(eval $(call assert_boolean,RESET_TO_BL31))
761$(eval $(call assert_boolean,SAVE_KEYS))
762$(eval $(call assert_boolean,SEPARATE_CODE_AND_RODATA))
763$(eval $(call assert_boolean,SEPARATE_NOBITS_REGION))
764$(eval $(call assert_boolean,SPIN_ON_BL1_EXIT))
765$(eval $(call assert_boolean,SPM_MM))
766$(eval $(call assert_boolean,TRUSTED_BOARD_BOOT))
767$(eval $(call assert_boolean,USE_COHERENT_MEM))
768$(eval $(call assert_boolean,USE_DEBUGFS))
769$(eval $(call assert_boolean,USE_ROMLIB))
770$(eval $(call assert_boolean,USE_TBBR_DEFS))
771$(eval $(call assert_boolean,WARMBOOT_ENABLE_DCACHE_EARLY))
772$(eval $(call assert_boolean,BL2_AT_EL3))
773$(eval $(call assert_boolean,BL2_IN_XIP_MEM))
774$(eval $(call assert_boolean,BL2_INV_DCACHE))
775$(eval $(call assert_boolean,USE_SPINLOCK_CAS))
776
777$(eval $(call assert_numeric,ARM_ARCH_MAJOR))
778$(eval $(call assert_numeric,ARM_ARCH_MINOR))
779$(eval $(call assert_numeric,BRANCH_PROTECTION))
780
781ifdef KEY_SIZE
782        $(eval $(call assert_numeric,KEY_SIZE))
783endif
784
785ifeq ($(filter $(SANITIZE_UB), on off trap),)
786        $(error "Invalid value for SANITIZE_UB: can be one of on, off, trap")
787endif
788
789################################################################################
790# Add definitions to the cpp preprocessor based on the current build options.
791# This is done after including the platform specific makefile to allow the
792# platform to overwrite the default options
793################################################################################
794
795$(eval $(call add_define,ARM_ARCH_MAJOR))
796$(eval $(call add_define,ARM_ARCH_MINOR))
797$(eval $(call add_define,COLD_BOOT_SINGLE_CPU))
798$(eval $(call add_define,CTX_INCLUDE_AARCH32_REGS))
799$(eval $(call add_define,CTX_INCLUDE_FPREGS))
800$(eval $(call add_define,CTX_INCLUDE_PAUTH_REGS))
801$(eval $(call add_define,EL3_EXCEPTION_HANDLING))
802$(eval $(call add_define,CTX_INCLUDE_MTE_REGS))
803$(eval $(call add_define,ENABLE_AMU))
804$(eval $(call add_define,ENABLE_ASSERTIONS))
805$(eval $(call add_define,ENABLE_BTI))
806$(eval $(call add_define,ENABLE_MPAM_FOR_LOWER_ELS))
807$(eval $(call add_define,ENABLE_PAUTH))
808$(eval $(call add_define,ENABLE_PIE))
809$(eval $(call add_define,ENABLE_PMF))
810$(eval $(call add_define,ENABLE_PSCI_STAT))
811$(eval $(call add_define,ENABLE_RUNTIME_INSTRUMENTATION))
812$(eval $(call add_define,ENABLE_SPE_FOR_LOWER_ELS))
813$(eval $(call add_define,ENABLE_SVE_FOR_NS))
814$(eval $(call add_define,ERROR_DEPRECATED))
815$(eval $(call add_define,FAULT_INJECTION_SUPPORT))
816$(eval $(call add_define,GICV2_G0_FOR_EL3))
817$(eval $(call add_define,HANDLE_EA_EL3_FIRST))
818$(eval $(call add_define,HW_ASSISTED_COHERENCY))
819$(eval $(call add_define,LOG_LEVEL))
820$(eval $(call add_define,NS_TIMER_SWITCH))
821$(eval $(call add_define,PL011_GENERIC_UART))
822$(eval $(call add_define,PLAT_${PLAT}))
823$(eval $(call add_define,PROGRAMMABLE_RESET_ADDRESS))
824$(eval $(call add_define,PSCI_EXTENDED_STATE_ID))
825$(eval $(call add_define,RAS_EXTENSION))
826$(eval $(call add_define,RESET_TO_BL31))
827$(eval $(call add_define,SEPARATE_CODE_AND_RODATA))
828$(eval $(call add_define,SEPARATE_NOBITS_REGION))
829$(eval $(call add_define,RECLAIM_INIT_CODE))
830$(eval $(call add_define,SPD_${SPD}))
831$(eval $(call add_define,SPIN_ON_BL1_EXIT))
832$(eval $(call add_define,SPM_MM))
833$(eval $(call add_define,TRUSTED_BOARD_BOOT))
834$(eval $(call add_define,USE_COHERENT_MEM))
835$(eval $(call add_define,USE_DEBUGFS))
836$(eval $(call add_define,USE_ROMLIB))
837$(eval $(call add_define,USE_TBBR_DEFS))
838$(eval $(call add_define,WARMBOOT_ENABLE_DCACHE_EARLY))
839$(eval $(call add_define,BL2_AT_EL3))
840$(eval $(call add_define,BL2_IN_XIP_MEM))
841$(eval $(call add_define,BL2_INV_DCACHE))
842$(eval $(call add_define,USE_SPINLOCK_CAS))
843
844ifeq (${SANITIZE_UB},trap)
845        $(eval $(call add_define,MONITOR_TRAPS))
846endif
847
848# Define the EL3_PAYLOAD_BASE flag only if it is provided.
849ifdef EL3_PAYLOAD_BASE
850        $(eval $(call add_define,EL3_PAYLOAD_BASE))
851else
852        # Define the PRELOADED_BL33_BASE flag only if it is provided and
853        # EL3_PAYLOAD_BASE is not defined, as it has priority.
854        ifdef PRELOADED_BL33_BASE
855                $(eval $(call add_define,PRELOADED_BL33_BASE))
856        endif
857endif
858
859# Define the DYN_DISABLE_AUTH flag only if set.
860ifeq (${DYN_DISABLE_AUTH},1)
861$(eval $(call add_define,DYN_DISABLE_AUTH))
862endif
863
864ifneq ($(findstring armlink,$(notdir $(LD))),)
865$(eval $(call add_define,USE_ARM_LINK))
866endif
867
868################################################################################
869# Build targets
870################################################################################
871
872.PHONY:	all msg_start clean realclean distclean cscope locate-checkpatch checkcodebase checkpatch fiptool sptool fip fwu_fip certtool dtbs memmap
873.SUFFIXES:
874
875all: msg_start
876
877msg_start:
878	@echo "Building ${PLAT}"
879
880ifeq (${ERROR_DEPRECATED},0)
881# Check if deprecated declarations and cpp warnings should be treated as error or not.
882ifneq ($(findstring clang,$(notdir $(CC))),)
883    CPPFLAGS		+= 	-Wno-error=deprecated-declarations
884else
885    CPPFLAGS		+= 	-Wno-error=deprecated-declarations -Wno-error=cpp
886endif
887# __ASSEMBLY__ is deprecated in favor of the compiler-builtin __ASSEMBLER__.
888ASFLAGS	+= -D__ASSEMBLY__
889# AARCH32/AARCH64 macros are deprecated in favor of the compiler-builtin __aarch64__.
890ifeq (${ARCH},aarch32)
891        $(eval $(call add_define,AARCH32))
892else
893        $(eval $(call add_define,AARCH64))
894endif
895endif # !ERROR_DEPRECATED
896
897$(eval $(call MAKE_LIB_DIRS))
898$(eval $(call MAKE_LIB,c))
899
900# Expand build macros for the different images
901ifeq (${NEED_BL1},yes)
902$(eval $(call MAKE_BL,1))
903endif
904
905ifeq (${NEED_BL2},yes)
906ifeq (${BL2_AT_EL3}, 0)
907FIP_BL2_ARGS := tb-fw
908endif
909
910$(if ${BL2}, $(eval $(call TOOL_ADD_IMG,bl2,--${FIP_BL2_ARGS})),\
911	$(eval $(call MAKE_BL,2,${FIP_BL2_ARGS})))
912endif
913
914ifeq (${NEED_SCP_BL2},yes)
915$(eval $(call TOOL_ADD_IMG,scp_bl2,--scp-fw))
916endif
917
918ifeq (${NEED_BL31},yes)
919BL31_SOURCES += ${SPD_SOURCES}
920$(if ${BL31}, $(eval $(call TOOL_ADD_IMG,bl31,--soc-fw)),\
921	$(eval $(call MAKE_BL,31,soc-fw)))
922endif
923
924# If a BL32 image is needed but neither BL32 nor BL32_SOURCES is defined, the
925# build system will call TOOL_ADD_IMG to print a warning message and abort the
926# process. Note that the dependency on BL32 applies to the FIP only.
927ifeq (${NEED_BL32},yes)
928
929BUILD_BL32 := $(if $(BL32),,$(if $(BL32_SOURCES),1))
930
931$(if ${BUILD_BL32}, $(eval $(call MAKE_BL,32,tos-fw)),\
932	$(eval $(call TOOL_ADD_IMG,bl32,--tos-fw)))
933endif
934
935# Add the BL33 image if required by the platform
936ifeq (${NEED_BL33},yes)
937$(eval $(call TOOL_ADD_IMG,bl33,--nt-fw))
938endif
939
940ifeq (${NEED_BL2U},yes)
941$(if ${BL2U}, $(eval $(call TOOL_ADD_IMG,bl2u,--ap-fwu-cfg,FWU_)),\
942	$(eval $(call MAKE_BL,2u,ap-fwu-cfg,FWU_)))
943endif
944
945# Expand build macros for the different images
946ifeq (${NEED_FDT},yes)
947    $(eval $(call MAKE_DTBS,$(BUILD_PLAT)/fdts,$(FDT_SOURCES)))
948endif
949
950locate-checkpatch:
951ifndef CHECKPATCH
952	$(error "Please set CHECKPATCH to point to the Linux checkpatch.pl file, eg: CHECKPATCH=../linux/scripts/checkpatch.pl")
953else
954ifeq (,$(wildcard ${CHECKPATCH}))
955	$(error "The file CHECKPATCH points to cannot be found, use eg: CHECKPATCH=../linux/scripts/checkpatch.pl")
956endif
957endif
958
959clean:
960	@echo "  CLEAN"
961	$(call SHELL_REMOVE_DIR,${BUILD_PLAT})
962	${Q}${MAKE} --no-print-directory -C ${FIPTOOLPATH} clean
963	${Q}${MAKE} PLAT=${PLAT} --no-print-directory -C ${CRTTOOLPATH} clean
964	${Q}${MAKE} --no-print-directory -C ${ROMLIBPATH} clean
965
966realclean distclean:
967	@echo "  REALCLEAN"
968	$(call SHELL_REMOVE_DIR,${BUILD_BASE})
969	$(call SHELL_DELETE_ALL, ${CURDIR}/cscope.*)
970	${Q}${MAKE} --no-print-directory -C ${FIPTOOLPATH} clean
971	${Q}${MAKE} --no-print-directory -C ${SPTOOLPATH} clean
972	${Q}${MAKE} PLAT=${PLAT} --no-print-directory -C ${CRTTOOLPATH} clean
973	${Q}${MAKE} --no-print-directory -C ${ROMLIBPATH} clean
974
975checkcodebase:		locate-checkpatch
976	@echo "  CHECKING STYLE"
977	@if test -d .git ; then						\
978		git ls-files | grep -E -v 'libfdt|libc|docs|\.rst' |	\
979		while read GIT_FILE ;					\
980		do ${CHECKPATCH} ${CHECKCODE_ARGS} -f $$GIT_FILE ;	\
981		done ;							\
982	else								\
983		 find . -type f -not -iwholename "*.git*"		\
984		 -not -iwholename "*build*"				\
985		 -not -iwholename "*libfdt*"				\
986		 -not -iwholename "*libc*"				\
987		 -not -iwholename "*docs*"				\
988		 -not -iwholename "*.rst"				\
989		 -exec ${CHECKPATCH} ${CHECKCODE_ARGS} -f {} \; ;	\
990	fi
991
992checkpatch:		locate-checkpatch
993	@echo "  CHECKING STYLE"
994	@if test -n "${CHECKPATCH_OPTS}"; then				\
995		echo "    with ${CHECKPATCH_OPTS} option(s)";		\
996	fi
997	${Q}COMMON_COMMIT=$$(git merge-base HEAD ${BASE_COMMIT});	\
998	for commit in `git rev-list $$COMMON_COMMIT..HEAD`; do		\
999		printf "\n[*] Checking style of '$$commit'\n\n";	\
1000		git log --format=email "$$commit~..$$commit"		\
1001			-- ${CHECK_PATHS} |				\
1002			${CHECKPATCH} ${CHECKPATCH_OPTS} - || true;	\
1003		git diff --format=email "$$commit~..$$commit"		\
1004			-- ${CHECK_PATHS} |				\
1005			${CHECKPATCH}  ${CHECKPATCH_OPTS} - || true;	\
1006	done
1007
1008certtool: ${CRTTOOL}
1009
1010.PHONY: ${CRTTOOL}
1011${CRTTOOL}:
1012	${Q}${MAKE} PLAT=${PLAT} USE_TBBR_DEFS=${USE_TBBR_DEFS} --no-print-directory -C ${CRTTOOLPATH}
1013	@${ECHO_BLANK_LINE}
1014	@echo "Built $@ successfully"
1015	@${ECHO_BLANK_LINE}
1016
1017ifneq (${GENERATE_COT},0)
1018certificates: ${CRT_DEPS} ${CRTTOOL}
1019	${Q}${CRTTOOL} ${CRT_ARGS}
1020	@${ECHO_BLANK_LINE}
1021	@echo "Built $@ successfully"
1022	@echo "Certificates can be found in ${BUILD_PLAT}"
1023	@${ECHO_BLANK_LINE}
1024endif
1025
1026${BUILD_PLAT}/${FIP_NAME}: ${FIP_DEPS} ${FIPTOOL}
1027	${Q}${FIPTOOL} create ${FIP_ARGS} $@
1028	${Q}${FIPTOOL} info $@
1029	@${ECHO_BLANK_LINE}
1030	@echo "Built $@ successfully"
1031	@${ECHO_BLANK_LINE}
1032
1033ifneq (${GENERATE_COT},0)
1034fwu_certificates: ${FWU_CRT_DEPS} ${CRTTOOL}
1035	${Q}${CRTTOOL} ${FWU_CRT_ARGS}
1036	@${ECHO_BLANK_LINE}
1037	@echo "Built $@ successfully"
1038	@echo "FWU certificates can be found in ${BUILD_PLAT}"
1039	@${ECHO_BLANK_LINE}
1040endif
1041
1042${BUILD_PLAT}/${FWU_FIP_NAME}: ${FWU_FIP_DEPS} ${FIPTOOL}
1043	${Q}${FIPTOOL} create ${FWU_FIP_ARGS} $@
1044	${Q}${FIPTOOL} info $@
1045	@${ECHO_BLANK_LINE}
1046	@echo "Built $@ successfully"
1047	@${ECHO_BLANK_LINE}
1048
1049fiptool: ${FIPTOOL}
1050fip: ${BUILD_PLAT}/${FIP_NAME}
1051fwu_fip: ${BUILD_PLAT}/${FWU_FIP_NAME}
1052
1053.PHONY: ${FIPTOOL}
1054${FIPTOOL}:
1055	${Q}${MAKE} CPPFLAGS="-DVERSION='\"${VERSION_STRING}\"'" --no-print-directory -C ${FIPTOOLPATH}
1056
1057sptool: ${SPTOOL}
1058.PHONY: ${SPTOOL}
1059${SPTOOL}:
1060	${Q}${MAKE} CPPFLAGS="-DVERSION='\"${VERSION_STRING}\"'" --no-print-directory -C ${SPTOOLPATH}
1061
1062.PHONY: libraries
1063romlib.bin: libraries
1064	${Q}${MAKE} PLAT_DIR=${PLAT_DIR} BUILD_PLAT=${BUILD_PLAT} ENABLE_BTI=${ENABLE_BTI} ARM_ARCH_MINOR=${ARM_ARCH_MINOR} INCLUDES='${INCLUDES}' DEFINES='${DEFINES}' --no-print-directory -C ${ROMLIBPATH} all
1065
1066# Call print_memory_map tool
1067memmap: all
1068	${Q}${PYTHON} $(PRINT_MEMORY_MAP) $(BUILD_PLAT)
1069
1070cscope:
1071	@echo "  CSCOPE"
1072	${Q}find ${CURDIR} -name "*.[chsS]" > cscope.files
1073	${Q}cscope -b -q -k
1074
1075help:
1076	@echo "usage: ${MAKE} [PLAT=<platform>] [OPTIONS] [TARGET]"
1077	@echo ""
1078	@echo "PLAT is used to specify which platform you wish to build."
1079	@echo "If no platform is specified, PLAT defaults to: ${DEFAULT_PLAT}"
1080	@echo ""
1081	@echo "platform = ${PLATFORM_LIST}"
1082	@echo ""
1083	@echo "Please refer to the User Guide for a list of all supported options."
1084	@echo "Note that the build system doesn't track dependencies for build "
1085	@echo "options. Therefore, if any of the build options are changed "
1086	@echo "from a previous build, a clean build must be performed."
1087	@echo ""
1088	@echo "Supported Targets:"
1089	@echo "  all            Build all individual bootloader binaries"
1090	@echo "  bl1            Build the BL1 binary"
1091	@echo "  bl2            Build the BL2 binary"
1092	@echo "  bl2u           Build the BL2U binary"
1093	@echo "  bl31           Build the BL31 binary"
1094	@echo "  bl32           Build the BL32 binary. If ARCH=aarch32, then "
1095	@echo "                 this builds secure payload specified by AARCH32_SP"
1096	@echo "  certificates   Build the certificates (requires 'GENERATE_COT=1')"
1097	@echo "  fip            Build the Firmware Image Package (FIP)"
1098	@echo "  fwu_fip        Build the FWU Firmware Image Package (FIP)"
1099	@echo "  checkcodebase  Check the coding style of the entire source tree"
1100	@echo "  checkpatch     Check the coding style on changes in the current"
1101	@echo "                 branch against BASE_COMMIT (default origin/master)"
1102	@echo "  clean          Clean the build for the selected platform"
1103	@echo "  cscope         Generate cscope index"
1104	@echo "  distclean      Remove all build artifacts for all platforms"
1105	@echo "  certtool       Build the Certificate generation tool"
1106	@echo "  fiptool        Build the Firmware Image Package (FIP) creation tool"
1107	@echo "  sptool         Build the Secure Partition Package creation tool"
1108	@echo "  dtbs           Build the Device Tree Blobs (if required for the platform)"
1109	@echo "  memmap         Print the memory map of the built binaries"
1110	@echo ""
1111	@echo "Note: most build targets require PLAT to be set to a specific platform."
1112	@echo ""
1113	@echo "example: build all targets for the FVP platform:"
1114	@echo "  CROSS_COMPILE=aarch64-none-elf- make PLAT=fvp all"
1115